CVE-2010-4255 - CERT CVE
ID CVE-2010-4255
Sažetak The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial of service (host OS BUG_ON) via a crafted memory access.
Reference
CVSS
Base: 6.1
Impact: 6.9
Exploitability:6.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE NONE COMPLETE
CVSS vektor AV:A/AC:L/Au:N/C:N/I:N/A:C
Zadnje važnije ažuriranje 10-10-2018 - 20:07
Objavljeno 25-01-2011 - 01:00